An entity accepts e-commerce payment card transactions and stores account data in a database The database server and the web server are both accessible from the Internet The database server and the web server are on separate physical servers.

An entity accepts e-commerce payment card transactions and stores account data in a database The database server and the web server are both accessible from the Internet The database server and the web server are on separate physical servers.

What is required for the entity to meet PCI DSS requirements7
A . The web server and the database server should be installed on the same physical server
B . The database server should be relocated so that it is not accessible from untrusted networks
C . The web server should be moved into the internal network
D . The database server should be moved to a separate segment from the web server to allow for more
concurrent connections

Answer: B

Explanation:

According to the PCI DSS v3.2.1 Quick Reference Guide1, the database server should be relocated so that it is not accessible from untrusted networks. This is one of the requirements for protecting cardholder data in transit and at rest.